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DETAILED ACTION 



Double Patenting 

The nonstatutory double patenting rejection is based on a judicially 
created doctrine grounded in public policy (a policy reflected in the statute) so as 
to prevent the unjustified or improper timewise extension of the "right to exclude" 
granted by a patent and to prevent possible harassment by multiple assignees. 
A nonstatutory obviousness-type double patenting rejection is appropriate where 
the conflicting claims are not identical, but at least one examined application 
claim is not patentably distinct from the reference claim(s) because the examined 
application claim is either anticipated by, or would have been obvious over, the 
reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. 
Cir. 1 998); In re Goodman, 1 1 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In 
re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 
F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 
619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 
1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 
1 .321 (d) may be used to overcome an actual or provisional rejection based on a 
nonstatutory double patenting ground provided the conflicting application or 
patent either is shown to be commonly owned with this application, or claims an 
invention made as a result of activities undertaken within the scope of a joint 
research agreement. 

Effective January 1 , 1 994, a registered attorney or agent of record may 
sign a terminal disclaimer. A terminal disclaimer signed by the assignee must 
fully comply with 37 CFR 3.73(b). 

Claim 1 is provisionally rejected on the ground of nonstatutory 

obviousness-type double patenting as being unpatentable over claim 1 of 
copending Application No. 10/675,496. Although the conflicting claims are not 
identical, they are not patentably distinct from each other because each claim 
performs the same procedural steps to authenticate a device. Claim 1 of the 
instant application is anticipated by claim 1 of copending application No. 
10/675,496 in that claim 1 of the patent contains all the limitations of claim 1 of 
the instant application. Claim 1 of the instant application therefore is not patently 
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distinct from the earlier patent claim and as such is unpatentable for obvious-type 
double patenting. 

This is a provisional obviousness-type double patenting rejection because 
the conflicting claims have not in fact been patented. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 1 02 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in 
public use or on sale in this country, more than one year prior to the date of application for patent in 
the United States. 

Claims 1-20 are rejected under 35 U.S.C. 102(b) as being anticipated by 
US 5,987,134 granted to Shin et al. 

Regarding claim 1 , Shin meets the claimed limitations as follows: 
"A method for controlling access to a network, the method comprising the 
following steps: (a) coupling a user device to a network; (b) transmitting a first 
response to the network; (c) generating a second response upon receipt of the 
first response by the network; (d) comparing the first response and second 
response; and (e) authenticating the user device if the first response and second 
response match, and not authenticating the user device if the first response and 
second do not match." see column 8, line 1, to column 10, line 35; column 25, 
line 65 to column 26, line 43. 

Regarding claim 2, Shin meets the claimed limitations as follows: 
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"The method of claim 1 wherein the first response includes a public shared 
secret." see column 8, line 1, to column 10, line 35. 

Regarding claim 3, Shin meets the claimed limitations as follows: 
"The method of claim 1 wherein the first response includes a private shared 
secret." see column 8, line 1, to column 10, line 35. 

Regarding claim 4, Shin meets the claimed limitations as follows: 
"The method of claim 1 wherein the first response includes a public shared secret 
and a private shared secret." see column 8, line 1, to column 10, line 35. 

Regarding claim 5, Shin meets the claimed limitations as follows: 
"The method of claim 1 wherein the second response includes a public shared 
secret." see column 8, line 1, to column 10, line 35. 

Regarding claim 6, Shin meets the claimed limitations as follows: 
"The method of claim 1 wherein the second response includes a private shared 
secret." see column 8, line 1, to column 10, line 35. 

Regarding claim 7, Shin meets the claimed limitations as follows: 
"The method of claim 1 wherein the second response is generated by the 
network." see column 9, lines 9-32. 

Regarding claim 8, Shin meets the claimed limitations as follows: 
"A method for controlling access to a network, the method comprising the 
following steps: (a) coupling a user device to a network; (b) transmitting a request 
to the network; (c) transmitting a challenge to the user device; (d) generating a 
first response; (e) transmitting the first response to the network; (f) generating a 
second response upon receipt of the first response by the network; (g) comparing 
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the first response and second response; and (h) authenticating the user device if 
the first response and second response match, and not authenticating the user 
device if the first response and second do not match." see column 8, line 1 , to 
column 1 0, line 35; column 25, line 65 to column 26, line 43. 

Regarding claim 9, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the first response includes a symmetric public 
shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 10, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the first response includes a symmetric private 
shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 1 1 , Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the first response includes a symmetric public 
shared secret and a symmetric private shared secret." see column 25, line 65 to 
column 26, line 43. 

Regarding claim 1 2, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the second response includes a symmetric 
public shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 1 3, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the second response includes a symmetric 
private shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 1 4, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the second response is generated by the 
network." see column 9, lines 9-32. 
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Regarding claim 15, Shin meets the claimed limitations as follows: 
"A method for controlling access to a public network, the method comprising the 
following steps: (a) coupling a user device to a public network, the network 
including a server; (b) transmitting an access request from the user device to the 
server; (c) transmitting a challenge from the server to the user device; (d) 
processing the challenge to ascertain a selected public shared secret stored on 
the user device; (e) generating a first response using at least the selected public 
shared secret; (f) transmitting the first response to the server; (g) generating a 
second response upon receipt of the first response by the server; (h) comparing 
the first response and second response; and (i) authenticating the user device to 
grant access to the public network if the first response and second response 
match, and not authenticating the user device if the first response and second do 
not match." see column 8, line 1, to column 10, line 35; column 25, line 65 to 
column 26, line 43. 

Regarding claim 16, Shin meets the claimed limitations as follows: 
"The method of claim 15 wherein the first response includes a symmetric public 
shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 1 7, Shin meets the claimed limitations as follows: 
"The method of claim 15 wherein the second response includes a symmetric 
public shared secret." see column 25, line 65 to column 26, line 43. 

Regarding claim 1 8, Shin meets the claimed limitations as follows: 
"The method of claim 8 wherein the second response is generated by the 
server." see column 10, lines 48-60. 
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Regarding claim 19, Shin meets the claimed limitations as follows: 
"A method for controlling access to a private network, the method comprising the 
following steps: (a) coupling a user device to a private network, the network 
including a server; (b) transmitting an access request from the user device to the 
server; (c) transmitting a challenge from the server to the user device; (d) 
processing the challenge to ascertain at least a selected private shared secret 
stored on the user device; (e) generating a first response using at least the 
selected private shared secret; (g) transmitting the first response to the server; 
(h) generating a second response upon receipt of the first response by the 
server; (i) comparing the first response and second response; and (j) 
authenticating the user device to grant access to the private network if the first 
response and second response match, and not authenticating the user device if 
the first response and second do not match." see column 8, line 1, to column 10, 
line 35; column 25, line 65 to column 26, line 43. 

Regarding claim 20, Shin meets the claimed limitations as follows: 
"A method for controlling access to a private network, the method comprising the 
following steps: (a) coupling a user device to a private network, the network 
including an access control server; (b) transmitting an access request from the 
user device to the server, the access request comprising a first response that 
includes a selected public shared secret and a selected private shared secret 
stored on the user device; (c) invoking the server to generate a second response 
upon receipt of the first response, the server generating the second response by 
means of the following steps, (i) processing the challenge transmitted to the user 
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device to retrieve the selected public shared secret and the selected private 
shared secret, and (ii) processing the selected public shared secret and selected 
private shared secret to generate the second response; (h) comparing the first 
response and second response; and (i) authenticating the user device to grant 
access to the private network if the first response and second response match, 
and not authenticating the user device if the first response and second do not 
match." see column 8, line 1 , to column 10, line 35; column 25, line 65 to column 
26, line 43. 

Regarding claim 21 , Shin meets the claimed limitations as follows: 
"The method of claim 20 wherein the first response includes a symmetric public 
shared secret and a symmetric private shared secret." see column 25, line 65 to 
column 26, line 43. 

Regarding claim 22, Shin meets the claimed limitations as follows: 
"The method of claim 20 wherein the second response includes a symmetric 
public shared secret and a symmetric private shared secret." see column 25, line 
65 to column 26, line 43. 

Regarding claim 23, Shin meets the claimed limitations as follows: 
"A method for controlling access to a private network, the method comprising the 
following steps: (a) coupling a user device to a private network, the network 
including an access control server; (b) transmitting an access request from the 
user device to the server; (c) transmitting a challenge from the server to the user 
device; (d) processing the challenge to retrieve a selected public shared secret 
and a selected private shared secret stored on the user device; (e) processing 
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the selected public shared secret and selected private shared secret to generate 
a first response; (f) transmitting the first response to the server; (g) invoking the 
server to generate a second response upon receipt of the first response by the 
server, the server generating the second response by means of the following 
steps, (i) processing the challenge transmitted to the user device to retrieve the 
selected public shared secret and the selected private shared secret, and (ii) 
processing the selected public shared secret and selected private shared secret 
to generate the second response; (h) comparing the first response and second 
response; and (i) authenticating the user device to grant access to the private 
network if the first response and second response match, and not authenticating 
the user device if the first response and second do not match." see column 8, line 
1 , to column 10, line 35; column 25, line 65 to column 26, line 43. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

A. McClain (US 2004009721 7) discloses a system for authenticating and 
authorizing a wireless communication device. 

B. Vollmer et al (US 20040073791) discloses a method of controlling, 
access to a network. 

C. Hoffstein et al (US 20020136401) discloses a method for authenticating 
digital signatures using a challenge and response communication. 
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D. Champagne (US 7,194,761) discloses a method for client 
authentication. 

E. Trostle (US 7,718,467) discloses a method for establishing secure 
communications between two participants. 

F. Vanstone et al. (US 6,430,690) discloses an authentication system for 
secure communications. 

G. Mashayekhi (US 5,818,936) discloses a method for authenticating a 
user in a distributed network system. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Matthew B. Smithers whose telephone 
number is (571) 272-3876. The examiner can normally be reached on Monday- 
Friday (8:00-4:30) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Emmanuel L. Moise can be reached on (571) 272-3865. 
The fax phone number for the organization where this application or proceeding 
is assigned is 571 -273-8300. 
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Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
91 99 (IN USA OR CANADA) or 571 -272-1 000. 



Matthew B Smithers 
Primary Examiner 
Art Unit 2137 




